CVE-2026-97524
CVE CVE-2026-97524EUVD EUVD-2026-86832Published 2026-09-25T10:21:27.000ZLast changed 2026-09-25T14:41:05.000ZCVSS 7.5
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcp_data_ready() via state change under unlucky error conditions, and then try to hold the data lock again. Break the recursion loop explicitly checking for the exceptional condition. Add a new flag instead of using an existing one like 'closing', to exit early in subflow_state_change(), and explicitly flush the RX queue at reset time. This avoids unneeded processing to check for available data -- calling get_mapping_status() and more on a dying subflow -- but also in error reporting and worker scheduling. Note that we must consume the currently peeked skb before invoking mptcp_dss_corruption to avoid consuming it again after the eventual reset has freed it.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux 12c1676d598e3b8dd92a033b623b792cc2ea1ec5; patch: 6.12.111; patch: 7.2.7; 8bfd391bde685df7289b928ce8876a3583be4bfb; 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25; fde99e972b8f88cebe619241d7aa43d288ef666a; 6.6.57 <6.7; patch: 0; 6.1.113 <6.2; e32d262c89e2b22cb0640223f953b548617ed8a6 <2b0f561f21b27c40c91ea4975268a06092bd7e9c; e32d262c89e2b22cb0640223f953b548617ed8a6 <ce7e4ede01ed3e47a48c0f1ce1d87bf4864bee9f; b8be15d1ae7ea4eedd547c3b3141f592fbddcd30; 6.11.4 <6.12; 5.15.169 <5.16; patch: 6.18.53; patch: 7.3-rc4; 6.12; e32d262c89e2b22cb0640223f953b548617ed8a6 <4b7abdcb5ba832fafab679f0d998af39cbc99307; 5.10.228 <5.11; e32d262c89e2b22cb0640223f953b548617ed8a6 <b2dbcc1ed48b5ac070a41db4a52aade6823c4df0
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.